Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/FDA49C78427911EABA58F344F8AEA228.roa
File: FDA49C78427911EABA58F344F8AEA228.roa (raw, json)
Hash identifier: eNItvTIs3jbqReG8otIUPR5mjUnULKzx6gvlJCH+hbE=
Subject key identifier: CC:95:96:5D:3B:1A:E9:20:C8:37:E6:0F:A6:44:59:02:08:9F:CC:6C
Certificate issuer: /CN=F36F6E4AAF/serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179
Certificate serial: 0A
Authority key identifier: 4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/FDA49C78427911EABA58F344F8AEA228.roa
Signing time: Wed 29 Jan 2020 09:30:31 +0000
ROA not before: Wed 29 Jan 2020 09:30:23 +0000
ROA not after: Thu 31 Jan 2030 09:30:23 +0000
asID: 3491
IP address blocks: 41.79.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F6E4AAF/serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179
Validity
Not Before: Jan 29 09:30:23 2020 GMT
Not After : Jan 31 09:30:23 2030 GMT
Subject: CN=5e3150b6-28e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:05:97:a2:26:d8:cd:0e:5a:7b:5d:83:f6:df:
ff:d7:35:f9:7e:56:6e:88:5a:21:e2:6b:f9:0f:3d:
21:59:c5:13:77:5d:0f:12:ea:04:2f:6d:1f:19:f8:
92:c1:18:49:4e:83:2f:47:51:00:29:f3:65:99:c0:
70:c5:f1:19:6a:5d:ec:cc:31:9c:6a:5d:37:10:6f:
53:34:a9:17:63:f5:83:b1:df:b0:02:10:b9:77:24:
aa:8e:42:1c:53:89:47:12:91:95:d1:e7:a1:ca:75:
66:c5:91:6d:a9:b6:9b:36:f6:cd:db:68:ba:a4:91:
80:fc:88:61:96:ea:8d:de:00:e1:ac:b9:58:45:67:
eb:ef:ed:63:31:02:de:d3:9d:8d:22:f4:20:e5:06:
11:5c:d4:75:12:8a:65:e8:33:45:86:c3:b6:d1:d0:
b0:3e:c9:f8:4f:b8:69:71:61:3c:d9:b0:ec:27:dd:
5f:c7:32:39:d3:5f:7a:32:45:c3:92:d6:98:0a:c9:
a2:d9:2d:3e:13:99:0d:3d:dd:40:1d:3c:6f:44:a2:
c1:a2:e8:c0:15:90:25:0e:a3:13:fc:d2:5a:14:d7:
7e:da:41:9f:cb:67:65:c5:a7:ac:85:4d:70:7e:ed:
c5:6d:85:68:f2:24:41:f8:fe:ba:95:d2:73:32:11:
82:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:95:96:5D:3B:1A:E9:20:C8:37:E6:0F:A6:44:59:02:08:9F:CC:6C
X509v3 Authority Key Identifier:
keyid:4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/FDA49C78427911EABA58F344F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.79.245.0/24
Signature Algorithm: sha256WithRSAEncryption
20:f6:b7:6a:20:64:ed:c6:68:ed:b9:3b:14:99:7e:74:23:4e:
8e:6f:9b:2b:0b:f1:81:20:e3:7f:ec:39:32:27:2a:db:32:5c:
66:08:bb:b6:eb:03:f4:72:74:e1:8b:97:b5:4f:29:55:01:98:
2c:20:57:dd:ce:a2:d0:d5:e7:a6:97:bc:0e:2c:67:e2:02:66:
39:b9:e2:cc:e4:35:ef:d1:66:c3:97:d8:90:c6:96:d1:52:d2:
fa:26:d1:65:16:6f:38:c0:95:28:1c:a0:e1:e5:cb:ba:9b:df:
3e:a0:ba:a7:71:08:75:b0:98:d9:5c:49:cc:a3:24:2b:05:6e:
bf:ff:6a:33:85:4b:fd:1b:87:77:8b:8a:2e:97:cd:66:58:d0:
8f:67:7c:93:d6:39:c7:36:44:86:d3:a6:8f:cb:af:7e:04:ef:
fb:5f:ad:e3:a9:e6:d1:65:05:07:be:a9:12:e2:69:4f:1d:02:
e7:da:f6:aa:47:04:db:98:d1:23:d2:41:d2:b3:8a:89:8f:43:
c2:2a:38:6f:d8:b8:5a:41:ed:a9:0e:70:f1:9a:b4:54:00:28:
fa:9e:47:46:84:49:20:10:1b:81:b8:ba:85:5a:17:15:44:33:
b0:e9:64:e3:46:1f:d7:f0:73:42:65:28:ff:33:5c:4e:e0:56:
f2:9b:e5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:19 2024 by rpki-client on console-fra.rpki-client.org